CVE-2008-3362
Last modified
CVE-2008-3362 is a vulnerability of currently unknown severity. Unrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager module 0.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the upfile parameter, then accessing it via a direct request to the file in wp-content/plugins/downloads-manager/upload/.. EPSS estimates a 16.85% chance of exploitation in the next 30 days.
Description
Unrestricted file upload vulnerability in upload.php in the Giulio Ganci Wp Downloads Manager module 0.2 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension via the upfile parameter, then accessing it via a direct request to the file in wp-content/plugins/downloads-manager/upload/.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Giulio Ganci | Wp Downloads Manager | 0.2 |
| Wordpress | Wp Downloads Manager | 0.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-3362?
How severe is CVE-2008-3362?
How do I fix CVE-2008-3362?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-3356verifydb in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), a…
- CVE-2008-3357Untrusted search path vulnerability in ingvalidpw in Ingres …
- CVE-2008-3358Cross-site scripting (XSS) vulnerability in Web Dynpro (WD) …
- CVE-2008-3359SQL injection vulnerability in register.php in Steve Bourgeo…
- CVE-2008-3360Stack-based buffer overflow in the HTML parser in IntelliTam…
- CVE-2008-3361Stack-based buffer overflow in IntelliTamper 2.07 allows rem…
- CVE-2008-3363Directory traversal vulnerability in user_portal.php in the …
- CVE-2008-3364Buffer overflow in the ObjRemoveCtrl Class ActiveX control i…
- CVE-2008-3365Directory traversal vulnerability in index.php in Pixelpost …
- CVE-2008-3366SQL injection vulnerability in story.php in Pligg CMS Beta 9…
- CVE-2008-3367Cross-site scripting (XSS) vulnerability in RTE_popup_link.a…
- CVE-2008-3368PHP remote file inclusion vulnerability in tools/packages/im…
Are you affected by CVE-2008-3362?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST